Sun Identity Manager Deployment Guide

Loading Solaris Accounts

In this scenario, the fullname attribute is the only correlation key. This is a weak correlation key, because differences in spacing and punctuation guarantee matches will fail. In addition, users can change their display names with the Solaris chfn command. Even if full names once matched, they might not agree if any users have run the chfn command.

By default, the fullname attribute is not queryable. To enable this feature, you must edit the UserUIConfig configuration object, and add the fullname attribute to the <QueryableAttrNames><List> element. See Defining Custom Correlation Keys for more information.

You will also need to create a custom rule to correlate fullname attributes. The following example, which is named “Correlate Full Names”, performs the correlation. It compares the value of the account.Description attribute from the Solaris resource to the fullname attribute, a system attribute that was populated from Active Directory.


<Rule subtype=’SUBTYPE_ACCOUNT_CORRELATION_RULE’ name=’Correlate Full Names’
   <cond>
      <ref>account.Description</ref>
      <list>
         <new class=’com.waveset.object.AttributeCondition’>
            <s>fullname</s>
            <s>equals</s>
            <ref>account.Description</ref>
         </new>
      </list>
   </cond>
</Rule>

This rule compares the Description attribute from the Solaris resource with the Identity Manager fullname attribute. If the two attributes match, the accounts are correlated, with a situation of CONFIRMED.

To load Solaris accounts, perform the procedure described in Loading Active Directory Accounts, with the following modifications:

The following table describes the users in this dataloading scenario.

Table 4–6 Users in Dataloading Scenario

Worker name  

AD Full Name  

Solaris Account Name  

Solaris Description  

Anthony Harris 

Anthony J Harris 

ajharris 

A.J. Harris 

Isabelle Moreno 

Isabelle Moreno 

imoreno 

Isabelle Moreno 

John Thomas (Sr.) 

John Thomas 

jthoma 

John Thomas 

John Thomas (Jr.) 

John P. Thomas 

jthomas2 

John Thomas 

Robert Blinn 

Bob Blinn 

rblinn 

Bob Blinn 

Theodore Benjamin 

Theodore Benjamin 

tbenjami 

Ted Benjamin 

In this example, only accounts for Isabelle Moreno can be expected to correlate.